Privacy Policy

We collect the following categories of information directly from you:

• Account information: email address and password, handled by our authentication provider (Supabase Auth). We never see or store your raw password.
• Profile information: full name, university, department/faculty, level or year of study, a short bio, phone number (only if you choose to add one, used for WhatsApp handoff with buyers or sellers), and profile photo.
• Student verification: a photo of your student ID, submitted voluntarily to earn a Verified badge. This image is stored in a private, access-restricted location and is visible only to you and to SefMar’s moderation team for the sole purpose of reviewing your submission. It is never shown publicly or shared with other users.
• Listings content: anything you post to sell or offer, including titles, descriptions, prices, condition, category, campus location, and photos of items.
• Chat messages: messages you exchange with other users about a listing, including read receipts and delivery status, sent through the app’s built-in chat.
• Reports and moderation activity: if you report a user, listing, or chat, we collect the report reason and related details. If your account or content is reported, we keep a record of the reason and outcome.
• Push notification token: a device token issued by the Expo push notification service, used to deliver notifications (new messages, listing status changes, verification results). No token is collected unless you allow notifications on your device.
• Saved listings and preferences: items you save/bookmark, and your notification preference settings.

We do not collect payment card numbers, bank details, or any financial account information. SefMar does not process payments; buyers and sellers arrange and complete payment between themselves, outside the app.

• To create and maintain your account, and authenticate you when you sign in.
• To display your listings, profile, and Verified badge (if earned) to other students on the platform.
• To review and approve or reject student ID verification submissions.
• To enable chat between buyers and sellers about a listing.
• To send push notifications about activity relevant to you (new messages, listing approvals, verification results), subject to your notification settings.
• To review and act on reports, enforce our Terms of Use, and keep the marketplace safe (including warning or suspending accounts that violate our guidelines).
• To operate, maintain, and improve the app’s functionality and reliability.

• Other users can see your profile (name, university, department, level/year, bio, photo), your Verified badge status, your active listings, and any messages you send them directly in chat.
• Your student ID photo is never shown to other users. It is visible only to you and to SefMar’s moderators/admins during the verification review, and to admins investigating a report that specifically involves your account.
• SefMar’s moderation team (admins and moderators) can access reported listings, reported chat threads, and account details as needed to review reports and enforce our Terms of Use. This access is limited to what’s needed for moderation and is logged.
• We do not sell your personal information to third parties, and we do not share it for third-party advertising.

SefMar is built on top of a small number of infrastructure providers that process data on our behalf, under their own security and privacy commitments:

• Supabase: authentication, database, and file storage for everything described above.
• Expo: push notification delivery to your device, using your device’s push token.

We do not use third-party advertising or analytics networks that track you across other apps or websites.

We retain your account and content for as long as your account is active. Reported content and moderation records are retained as needed to enforce our Terms of Use and resolve disputes. If you delete your account (see below), your profile, listings, listing photos, chat messages, verification ID photo, saved listings, and push token are permanently deleted.

• Access and update: you can view and edit your profile information at any time from within the app.
• Notification preferences: you can turn categories of push notifications on or off in Settings.
• Delete your account: you can permanently delete your account and all associated data at any time from Settings. This is immediate and cannot be undone, it removes your profile, listings, chat messages, verification ID photo, and all other data described in Section 1.
• Depending on where you live, you may have additional rights over your personal data (such as requesting a copy of it, or objecting to certain processing). Contact us using the details below to exercise these rights.

SefMar is intended for university students and is not directed at children. We do not knowingly collect information from anyone under the age required to enroll in tertiary education in their jurisdiction. If you believe a child has provided us with personal information, contact us and we will delete it.

We use industry-standard safeguards to protect your information, including access controls that restrict who can view sensitive data (like verification ID photos) and encryption in transit. No method of transmission or storage is 100% secure, and we can’t guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we’ll update the effective date above and, where appropriate, notify you in the app. Continuing to use SefMar after a change means you accept the updated policy.

Questions about this Privacy Policy or your data? Email us at support@sefmar.app.